CVE-2024-8428
Last modified
CVE-2024-8428 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submit_form_handler due to missing validation on the 'user_id' user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to change the email address of administrative user accounts which can then be leveraged to reset the administrative users password and gain access to their account.. EPSS estimates a 0.48% chance of exploitation in the next 30 days.
Description
The ForumWP – Forum & Discussion Board Plugin plugin for WordPress is vulnerable to Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 2.0.2 via the submit_form_handler due to missing validation on the 'user_id' user controlled key. This makes it possible for authenticated attackers, with subscriber-level access and above, to change the email address of administrative user accounts which can then be leveraged to reset the administrative users password and gain access to their account.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ultimatemember | Forumwp | <= 2.0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-8428?
How severe is CVE-2024-8428?
How do I fix CVE-2024-8428?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-8421Rejected reason: Red Hat Product Security has come to the co…
- CVE-2024-8422CWE-416: Use After Free vulnerability exists that could caus…7.8
- CVE-2024-8424Improper Privilege Management vulnerability in WatchGuard EP…8.5
- CVE-2024-8425The WooCommerce Ultimate Gift Card plugin for WordPress is v…9.8
- CVE-2024-8426The Page Builder: Pagelayer WordPress plugin before 1.8.8 d…4.8
- CVE-2024-8427The Frontend Post Submission Manager Lite – Frontend Posting…4.3
- CVE-2024-8429Improper Restriction of Excessive Authentication Attempts vu…4.3
- CVE-2024-8430The Spice Starter Sites plugin for WordPress is vulnerable t…5.3
- CVE-2024-8431The Photo Gallery, Images, Slider in Rbs Image Gallery plugi…4.3
- CVE-2024-8432The Appointment & Event Booking Calendar Plugin – Webba Book…4.3
- CVE-2024-8433The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin f…6.4
- CVE-2024-8434The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin f…4.3
Are you affected by CVE-2024-8428?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST